v2026.09.16

Update the macOS bootstrap bundles for macOS 27 and ship separate Apple Silicon and Intel archives.

macOS changes

• Darwin dash, toolchain, and utils now use <component>_aarch64_darwin.tar.zst and <component>_x86_64_darwin.tar.zst. Select the archive for the machine running the tools and update download URLs and checksums.
• Update the Apple Silicon toolchain from Xcode 27. Both architectures' bootstrap utilities are built with SDK 27.0 and require macOS 14.0 or later.
• Add SDK 27.0 and remove SDK 15.4. The available SDKs are 12.1, 14.5, 15.2, 26.5, and 27.0; their macos_sdk_<version>.tar.zst archives remain architecture-independent.

Package updates

• coreutils: 9.11 → 9.12.
• Linux sandbox libgcc: 16.1.0 → 16.2.0.
• CA certificates: 2026-07-16 → 2026-08-13.
• Gawk remains at 5.4.0.

Build improvements

• Add make all_darwin to build both architectures' utilities and package the native toolchain and SDKs. Docker is required only for Linux builds.
• Support overrides for the macOS toolchain, build SDK, deployment target, and build parallelism.
• Archive only supported, completed components, remove failed archive outputs, fix source-cleaning targets, and isolate parallel Linux Docker builds.

The attached SHASUMS256.txt contains checksums for all 21 archives.

Full changelog: v2026.07.29...v2026.09.16

v2026.07.29

Updates the sandbox rootfs to glibc 2.44 and refreshes all components to their latest upstream releases.

Component updates

• glibc 2.43 → 2.44
• dash 0.5.12 → 0.5.13.5
• busybox 1.37.0 → 1.38.0
• coreutils 9.9 → 9.11
• gcc (libgcc_s) 15.2.0 → 16.1.0
• toybox 0.8.13 → 0.8.14
• gawk 5.3.2 → 5.4.0
• cacert 2026-03-19 → 2026-07-16
• grep unchanged at 3.12 (already latest)
• Build images: alpine 3.23.2 → 3.24.1, fedora 43 → 45

All source checksums were verified against upstream signed or published checksums.

Fixed: macOS SDK artifacts contained the wrong SDK

SDK_PATH was a single global simply-expanded variable reassigned on each eval, while the recipe expanded $(SDK_PATH) at recipe-execution time. Every macos_sdk_* target therefore copied whichever version was evaluated last.

macOS SDK set changed

Now ships 12.1, 14.5, 15.2, 15.4, 26.5.

• 26.2 → 26.5: 26.2 is no longer shipped in the Command Line Tools.
• 15.4 added: newly available.
• 12.3 dropped: the installed SDK is an empty stub containing no headers.

Verification

All 18 artifacts pass shasum -c against SHASUMS256.txt. Both sandbox rootfs images were tested by compiling a dynamically-linked binary and executing it through the bundled loader and libraries, confirming a working glibc 2.44 runtime on each architecture.

cloud-hypervisor_x86_64_linux, vmlinux-x86_64, and vmlinux-aarch64 are carried forward unchanged from v2026.01.26.

v2026.01.26

• Use .unpacked stamp files for source dependencies instead of directories
  to prevent unnecessary rebuilds when builds modify source trees
• Hardcode checksums in Makefile instead of downloading from same server as tarballs
• Use Docker for all Linux builds (both on macOS and Linux) for reproducibility
• Fix gawk/grep lipo race condition by depending on directory targets with recipes
• Fix toybox parallel build race by clearing MAKEFLAGS before sub-make
• Fix clean_dist to fully remove directory instead of just contents
• Add component/platform validity matrix to prevent invalid target generation
• Simplify UNIVERSAL_DARWIN_COMPONENTS to use COMMON_COMPONENTS directly
• Add docker_platform helper for consistent Docker platform naming
• Update README with Docker requirements and OrbStack as alternative
• Disable busybox CONFIG_TC and SHA hardware acceleration on aarch64
• Add macOS SDK 26.2
• Bump versions
• Add vmlinux-x86_64 and vmlinux-aarch64

v2024.10.03

This release bumps gawk to 5.3.1 in the macos utils bundle and adjusts the SDK paths to reflect those installed by XCode 16 for macOS 15.0.

v2024.06.20

This release updates the sources used for the macOS artifacts.

toybox 0.8.11
add macOS SDK 14.5
change path for macOS toolchain
It additionally bumps the build environment for the Linux artifacts, increases the compression used to create the tarballs and switches to a single file for the checksums.

v2024.04.02

• Generate tarballs with a .zst extension instead of .zstd
• coreutils 9.5
• gawk 5.3.0
• macOS SDK 14.4

v2023.12.14

Initial commit